Last updated: January 2025
1. Privacy at a Glance
General Information
The following provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.
2. Data Controller
The party responsible for data processing on this website is:
The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
3. Data We Collect
In the course of using PetoVita, we collect and process the following personal data:
Account Data
- Email address (for login and communication)
- Password (stored encrypted)
Usage Data
- Your answers to our questions (your personal stories)
- AI-generated summaries of your life story
- Timestamps of interactions
Technical Data
- IP address (for error diagnosis only)
- Browser and device information
Payment Data
- Payment information is processed directly by Stripe
- We do not store credit card data
4. Legal Bases for Processing
We process your data based on the following legal grounds:
- Contract Performance (Art. 6(1)(b) GDPR): To provide our service, send questions via email, and generate your life story.
- Consent (Art. 6(1)(a) GDPR): For optional analytics (PostHog) and marketing communications.
- Legitimate Interests (Art. 6(1)(f) GDPR): For error fixing, security, and service improvement.
5. Third-Party Services and Data Transfers
We work with the following service providers:
Supabase (Database)
Purpose: Storing your account data, answers, and generated stories
Location: Netherlands (EU)
Privacy Policy: supabase.com/privacy
Anthropic Claude (AI Processing)
Purpose: Generating your personalized life story summaries
Location: USA
Note: Your data is transferred under Standard Contractual Clauses (SCCs). Anthropic does not use your data to train their models.
Privacy Policy: anthropic.com/privacy
Postmark (Email Delivery)
Purpose: Sending questions and system notifications via email
Location: USA
Privacy Policy: postmarkapp.com/privacy-policy
Stripe (Payment Processing)
Purpose: Processing premium subscription payments
Location: USA/EU
Privacy Policy: stripe.com/privacy
Sentry (Error Monitoring)
Purpose: Detecting and fixing technical errors
Location: EU (Frankfurt)
Privacy Policy: sentry.io/privacy
PostHog (Analytics) - Optional
Purpose: Anonymized usage analytics to improve the service
Location: EU
Note: Only active if you consent via the cookie banner
Privacy Policy: posthog.com/privacy
6. Cookies and Tracking
We use the following cookies:
Necessary Cookies
- Session Cookie: For your login status (required)
Optional Cookies
- PostHog Analytics: For usage analysis (only with your consent)
You can change your cookie preferences at any time via the link in the footer.
7. Data Retention and Deletion
- Account Data: Until you delete your account
- Your Answers and Stories: Until you delete your account
- Payment Data: According to legal retention requirements (10 years)
- Technical Logs: 30 days
Upon account deletion, all your data is permanently deleted.
8. Your Rights
Under the GDPR, you have the following rights:
- Right of Access (Art. 15): You can request information about your stored data.
- Right to Rectification (Art. 16): You can request correction of inaccurate data.
- Right to Erasure (Art. 17): You can request deletion of your data.
- Right to Restriction (Art. 18): You can request restriction of processing.
- Right to Data Portability (Art. 20): You can export your data in a common format.
- Right to Object (Art. 21): You can object to processing.
- Right to Withdraw Consent (Art. 7): You can withdraw consent at any time.
To exercise your rights, contact us at admin@petovita.com.
You also have the right to lodge a complaint with a data protection supervisory authority.
9. Data Security
We implement technical and organizational measures to protect your data:
- SSL/TLS encryption of all data transfers
- Encrypted storage of passwords
- Regular security updates
- Access restrictions on data
10. Changes to This Privacy Policy
We reserve the right to update this privacy policy. Significant changes will be communicated to you via email.